
$ rpki-client -vvf rpki.apnic.net/member_repository/A9158EC4/45064790E5B111EE9E35C333C4F9AE02/UyQGWmE9LRB4F5xiFjcczGp3UHo.mft
File: UyQGWmE9LRB4F5xiFjcczGp3UHo.mft (raw, json)
Hash identifier: kov3qsnTa/KvGBi37wdc5S7hgNB8CHvaKi9c0w29Gkc=
Subject key identifier: 1E:A0:BD:7F:81:34:74:60:4B:D9:91:A0:27:82:4F:AA:12:19:CA:50
Authority key identifier: 53:24:06:5A:61:3D:2D:10:78:17:9C:62:16:37:1C:CC:6A:77:50:7A
Certificate issuer: /CN=A9158EC4/serialNumber=5324065A613D2D1078179C6216371CCC6A77507A
Certificate serial: 01C3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UyQGWmE9LRB4F5xiFjcczGp3UHo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9158EC4/45064790E5B111EE9E35C333C4F9AE02/UyQGWmE9LRB4F5xiFjcczGp3UHo.mft
Manifest number: 01BC
Signing time: Mon 27 Jul 2026 05:37:52 +0000
Manifest this update: Mon 27 Jul 2026 05:37:52 +0000
Manifest next update: Mon 03 Aug 2026 05:37:52 +0000
Files and hashes: 1: UyQGWmE9LRB4F5xiFjcczGp3UHo.crl (hash: EgKdXg1wCpw40SUDhaIT+zKL/33IY3koQ/OY42ZLx9o=)
2: 2805F2D6E5B511EEB34EF35AC4F9AE02.roa (hash: 3kP9Z+OOoAND6PAOU9ue/UcJJCzKrLb+i6LxI6B2qrY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9158EC4/45064790E5B111EE9E35C333C4F9AE02/UyQGWmE9LRB4F5xiFjcczGp3UHo.crl
rsync://rpki.apnic.net/member_repository/A9158EC4/45064790E5B111EE9E35C333C4F9AE02/UyQGWmE9LRB4F5xiFjcczGp3UHo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UyQGWmE9LRB4F5xiFjcczGp3UHo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 05:37:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 451 (0x1c3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9158EC4, serialNumber=5324065A613D2D1078179C6216371CCC6A77507A
Validity
Not Before: Jul 27 05:37:52 2026 GMT
Not After : Aug 3 05:37:52 2026 GMT
Subject: CN=6a66eeb0-0e7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:56:38:72:11:52:c1:f3:bf:f7:48:b2:eb:29:
5d:81:30:d9:02:d9:72:51:d0:c3:2f:00:a8:8d:11:
a9:2a:89:87:67:7d:57:9d:57:51:69:59:86:ab:36:
82:19:05:0a:43:23:38:9c:d0:03:ae:e9:cd:f8:f3:
b3:07:eb:91:54:c8:0b:f1:eb:7d:0d:8f:82:5f:b6:
06:32:78:3b:57:0e:7f:38:67:7d:0b:88:55:5a:7c:
ce:b9:da:56:b3:e3:8b:49:32:f9:50:1d:12:b9:af:
e4:ed:1b:f1:f3:85:20:17:ee:03:8b:a7:e9:d4:b6:
36:28:9c:8c:b8:ca:e2:8f:f9:fe:4c:d7:1d:ae:5a:
27:1f:c3:58:78:58:89:7e:17:63:b5:e3:f4:23:9f:
93:3f:b3:d5:54:b6:d8:4b:a9:19:52:19:1c:60:c4:
4a:1d:cd:18:6d:47:d4:59:8a:bf:ef:38:78:a0:5e:
fa:a0:da:bb:a3:34:ee:a2:f6:df:58:8a:d1:c0:18:
69:7b:0b:15:32:1e:70:8f:8c:a8:22:4f:0f:2b:6e:
9a:cf:7f:e9:2d:24:1a:da:62:f9:2a:df:93:74:1e:
96:9f:d7:c9:e1:ab:76:df:27:b1:77:0a:66:0b:35:
8c:aa:b4:96:fa:21:ce:27:50:1c:0d:66:ed:42:5f:
1e:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:A0:BD:7F:81:34:74:60:4B:D9:91:A0:27:82:4F:AA:12:19:CA:50
X509v3 Authority Key Identifier:
keyid:53:24:06:5A:61:3D:2D:10:78:17:9C:62:16:37:1C:CC:6A:77:50:7A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9158EC4/45064790E5B111EE9E35C333C4F9AE02/UyQGWmE9LRB4F5xiFjcczGp3UHo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UyQGWmE9LRB4F5xiFjcczGp3UHo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158EC4/45064790E5B111EE9E35C333C4F9AE02/UyQGWmE9LRB4F5xiFjcczGp3UHo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
03:02:7b:2c:f1:2d:26:57:fe:45:64:98:90:cc:3e:40:57:02:
4c:1b:74:cc:ad:dc:49:87:f7:d9:5b:0c:32:3b:00:f5:1f:89:
c8:f3:b9:a8:24:24:fd:5e:5a:e4:a6:17:7b:6e:58:23:82:6f:
0b:e2:9b:29:f7:b9:67:41:cd:ec:ca:24:2e:66:ae:5d:fb:5e:
e2:62:5f:c9:9e:03:a9:35:47:fd:da:a6:d8:a0:98:54:22:90:
e0:20:a4:22:ac:17:a1:de:96:4b:cc:51:00:48:cb:84:ff:13:
6c:ed:c8:16:63:c7:84:a2:43:36:b5:c3:b1:47:97:a7:2b:e1:
b5:3d:4a:a9:23:bc:df:ef:e3:1f:41:10:7a:13:f8:df:cc:dc:
ac:1d:44:2d:7a:7b:2c:ee:0d:de:5d:7f:7c:25:40:5d:5a:5c:
75:0b:a9:12:0c:84:0a:5c:5b:ee:df:c7:2c:6f:43:1f:93:c3:
cf:aa:ef:db:56:e6:77:f6:80:e5:00:61:48:46:09:43:f3:8a:
a7:03:79:aa:f3:60:d8:f3:da:f3:8c:4d:83:76:0e:68:34:0c:
7a:58:eb:97:1b:8e:11:5a:9c:f9:48:47:47:06:b0:18:28:b4:
32:e6:aa:97:1a:48:ec:3b:1f:d9:84:b8:c0:fa:75:ab:97:9e:
08:a8:78:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 23:12:00 2026 by rpki-client